CLOUD INVENTORY · COST · AUTOPILOT
Know exactly what you run in the cloud, and what it costs.
Zaysa finds every resource across AWS, Azure, Google Cloud and DigitalOcean, shows the waste in dollars, and fixes problems with your approval.
Free plan, no card needed.
CLOUD MAP
Every resource and proven connection
Illustration.
CLOUDS
AWS, Azure, Google Cloud, DigitalOcean
ALSO
Kubernetes, OpenShift and VMs
CLOUD ACCESS
No stored keys on AWS, Azure, Google Cloud
ENCRYPTED
Secrets encrypted at rest, AES-256-GCM
AUTOPILOT
Find the problem. Fix it with your approval.
Autopilot watches your clusters, servers and databases. It explains what is wrong in plain words, checks your rules, and changes nothing until you approve. Every change is recorded and can be undone.
See how Autopilot worksAutopilot
Your AI proposes. Zaysa decides, executes under a short-lived credential, and can undo it.
Waiting for you
0
Prepared and held for a human.
Not actioned
3
Refused by a guardrail or a rule.
AI tokens (24h)
1.8k
On your own provider key.
Recent findings
Newest first, across every cluster, VM and database.
Autopilot watches your clusters, servers and databases.
How much may Autopilot do? You choose for each cluster and server. The film above runs in Assist.
Shadow
Shows what it would fix. Changes nothing.
Assist
Proposes a fix and runs it only after you approve.
Auto
Fixes on its own within your limits: risk ceiling, changes per window, freeze windows and protected namespaces.
SEE EVERYTHING
Cloud Map
A live, evidenced map of your AWS and Google Cloud accounts: resources, proven connections, internet exposure and cost, from a read-only scan. Azure and DigitalOcean are coming next.
Learn more →Every connection, proven
Only links the scan can evidence are drawn
What is open to the internet
Exposed resources and the ports involved
Cost on every resource
What each part of the map costs per month
Example data from an AWS account. Cloud Map covers AWS and Google Cloud. Azure and DigitalOcean are coming next.
COST AND WASTE
Stop paying for what you don't use.
Zaysa finds every idle, stopped or unattached resource in your cloud accounts and shows what each one costs you a month. Then an AutoStopping rule stops idle servers for you, using your cloud's own numbers.
See cost and wasteWaste detection and cleanup
Identify wasteful cloud resources and clean them up to reduce costs.
Reading 3 cloud accounts
Total waste items
0
Across every connected account.
Monthly waste cost
$0/mo
What these cost you each month.
Potential savings
$0/mo
If you clean all of it up.
Zaysa reads every cloud account you connect.
ACCESS
Give access only when it's needed.
Engineers ask for time-bound access to cloud accounts, databases, clusters, servers and GitHub. Someone else approves it, it expires on its own, and everything is recorded. Databases and servers stay inside your network.
See accessRequest access
Ask for time-boxed access to a cloud account, a GitHub repo or team, a database, a server, a Kubernetes or OpenShift cluster, Slack, or Linear. An owner approves, then it's provisioned and (for DB/SSH/K8s) credentials are issued to you once.
Request access
Database
Privileges
Reason
The approver decides on the why.
Duration
My requests
No requests yet.
Nobody keeps standing access to production.
CI/CD AND TERRAFORM
Ship infrastructure changes with a plan and an approval.
Terraform pipelines validate and plan, wait for approval, then apply exactly the plan that was approved. Pipelines for GitHub Actions and Jenkins, the cost of a change on the pull request, and no stored cloud keys.
See CI/CDCI/CD Pipelines
terraform · prod · GitHub Actions
Scale checkout for the sale #128
terraform/checkout.tf
terraform/cache.tf
Run · scale-checkout · 9f3c2a1
GitHub ActionsValidate
Queued
Plan
Queued
Approval
Queued
Apply
Queued
Notify
Queued
Every Terraform change goes through one pipeline.
ONE PLATFORM
Everything connected, in one picture.
Zaysa brings your clouds, clusters, pipelines and access together, so a finding arrives with its cost, its owner and the fix.
YOUR SOURCES
THE ZAYSA GRAPH
Resources, cost, access and changes, connected
WHAT ZAYSA DOES
Found: batch-worker, an EC2 instance, idle for 14 days
$184 per month
Proposed: stop it out of hours
Zaysa stops it every evening and records the change.
Example data.
ALSO IN ZAYSA
The rest of your cloud operations, in the same place.
Cloud History and Snapshots
Every change across your clouds, and two scans compared side by side
Learn morePR Cost Gates
The monthly cost of a pull request on GitHub, blocked over budget if you choose
Learn moreRoles, policies and teams
Who may do what, on which cloud account, checked before anyone tries
Learn moreSAFE TO CONNECT
You stay in control of your cloud.
No stored cloud keys
On AWS, Azure and Google Cloud, Zaysa uses short-lived federated identity instead of long-lived access keys.
Nothing changes on its own
Autopilot starts in a mode that only shows what it would do. You choose what needs approval and what is always blocked.
Every action recorded
Access requests, approvals and every change made by a person or by Autopilot go into an audit trail.
Encrypted at rest
Secrets and tokens Zaysa holds are encrypted at rest with AES-256-GCM, and database backups are encrypted and versioned.
PLANS
Start free. Upgrade when it pays for itself.
Free
$0/mo
Inventory, waste detection, Cloud Map and Autopilot findings.
Start freeCloud Map
Waste detection
Autopilot in Shadow
Pro
$20/mo
Guided cleanup, alerts, budgets, CI/CD and approved fixes.
Choose ProGuided cleanup
Budgets and alerts
Approved fixes
Business
$50/mo
Autonomous fixes, access governance and unlimited seats.
Choose BusinessAutonomous fixes
Access governance
Unlimited seats
FAQ
Questions before you connect.
Do I need a credit card?
Not for the Free plan. The Pro and Business trials ask for a card; you are charged when the trial ends unless you cancel before then.
What access does Zaysa need to my cloud?
On AWS, Azure and Google Cloud you grant access through short-lived federated identity, so no access keys are stored. DigitalOcean uses an API token, which is stored encrypted. Anything that changes your infrastructure runs only with the permissions you grant.
Can Zaysa change my infrastructure without me?
Not unless you allow it. Autopilot starts by only showing what it would do. You choose which fixes may run automatically, which need approval, and which are always blocked. Automatic fixes are part of the Business plan.
Which clouds are supported?
AWS, Azure, Google Cloud and DigitalOcean, plus Kubernetes, OpenShift and VMs. Cloud Map covers AWS and Google Cloud. Azure and DigitalOcean are coming next.
How is my data protected?
Secrets and tokens are encrypted at rest with AES-256-GCM, database backups are encrypted and versioned, and Zaysa connects to AWS, Azure and Google Cloud without stored access keys. Where data is stored is set out in our privacy policy.
Can I cancel or get a refund?
You can cancel anytime. If you ask for a refund, monthly or yearly, we refund the unused part of your current billing period and your plan moves to Free; your data is kept.
See what you run, and what it costs.
Free plan, no card needed.